SI-7 (3)

SI-7 (3): Centrally-Managed Integrity Tools

The organization employs centrally managed integrity verification tools.

None

Overlays
None

The controls below (if any) were marked by NIST as being related to SI-7 (3).

Control	Description
AU-3	The information system generates audit records containing information that establishes what type of event occurred, when the event occurred, where the event occurred, the source of the event, the outcome of the event, and the identity of any individuals or subjects associated with the event.
SI-2	The organization: SI-2a.: Identifies, reports, and corrects information system flaws; SI-2b.: Tests software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation; SI-2c.: Installs security-relevant software and firmware updates within [Assignment: organization-defined time period] of the release of the updates; and SI-2d.: Incorporates flaw remediation into the organizational configuration management process.
SI-8	The organization: SI-8a.: Employs spam protection mechanisms at information system entry and exit points to detect and take action on unsolicited messages; and SI-8b.: Updates spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures.

The controls below (if any) add on to the requirements of SI-7 (3).

Control	Description
No controls

The CCIs below are tied to SI-7 (3).

CCI	Definition
CCI-001301	The organization employs centrally managed integrity verification tools.